Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/930cab-6687-4fef-83d4-fa165414c901/1/lYo3TgJPZrYER3hhHUqLTW-6__4.roa
File: lYo3TgJPZrYER3hhHUqLTW-6__4.roa (raw, json)
Hash identifier: AHy1pskztSefe50SDBe2IuAy0vfzMGKu75vYlr38vtM=
Subject key identifier: 95:8A:37:4E:02:4F:66:B6:04:47:78:61:1D:4A:8B:4D:6F:BA:FF:FE
Certificate issuer: /CN=0e41f9a0c86cebcc63c43fa0539d4249814ab740
Certificate serial: 018AAE3392D97BB042A301FF895B0289C66B
Authority key identifier: 0E:41:F9:A0:C8:6C:EB:CC:63:C4:3F:A0:53:9D:42:49:81:4A:B7:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkH5oMhs68xjxD-gU51CSYFKt0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/930cab-6687-4fef-83d4-fa165414c901/1/lYo3TgJPZrYER3hhHUqLTW-6__4.roa
Signing time: Tue 19 Sep 2023 16:08:50 +0000
ROA not before: Tue 19 Sep 2023 16:08:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 146.19.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ae:33:92:d9:7b:b0:42:a3:01:ff:89:5b:02:89:c6:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e41f9a0c86cebcc63c43fa0539d4249814ab740
Validity
Not Before: Sep 19 16:08:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=958a374e024f66b6044778611d4a8b4d6fbafffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:5b:f3:a9:3f:9f:b0:d9:e1:c3:14:df:40:
10:a0:ac:14:aa:b7:0a:dc:3a:41:8e:af:37:4d:d8:
16:b1:e8:44:d1:2b:31:bc:c7:a8:63:99:73:3f:06:
25:5e:c7:be:5f:42:c1:2e:8a:db:47:fb:2e:1c:68:
12:f3:ca:b5:fc:90:a3:62:ed:8e:df:86:ca:c7:a9:
75:8a:04:c0:c8:e1:80:aa:9b:8f:35:0b:ec:68:28:
46:e0:ae:00:35:d3:37:ed:25:de:81:a4:24:e3:8d:
5f:26:1f:91:d1:53:1a:ca:a4:2f:c0:6c:b0:75:37:
c3:75:be:09:39:de:bd:d8:3e:a0:15:f3:1f:26:84:
5d:64:60:73:8c:c6:76:44:da:24:3e:3f:6c:c1:4a:
1c:40:79:a9:d4:8f:f2:25:ee:0a:c5:b6:1b:9f:13:
cc:91:53:b9:48:08:43:5b:3d:9b:b0:e6:86:0a:e9:
b6:9b:d7:10:01:3b:56:75:24:62:2a:e7:7f:88:ed:
ef:f4:57:94:e1:23:eb:54:e6:98:39:dd:65:2e:2b:
b8:aa:77:2e:51:ec:c9:05:95:38:08:cb:86:9e:5f:
2f:8b:2d:c8:a7:22:85:7b:e8:b4:31:51:3c:ec:20:
90:37:eb:34:ed:c2:28:37:80:ff:42:fd:bb:22:5a:
b8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8A:37:4E:02:4F:66:B6:04:47:78:61:1D:4A:8B:4D:6F:BA:FF:FE
X509v3 Authority Key Identifier:
keyid:0E:41:F9:A0:C8:6C:EB:CC:63:C4:3F:A0:53:9D:42:49:81:4A:B7:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkH5oMhs68xjxD-gU51CSYFKt0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/930cab-6687-4fef-83d4-fa165414c901/1/lYo3TgJPZrYER3hhHUqLTW-6__4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/930cab-6687-4fef-83d4-fa165414c901/1/DkH5oMhs68xjxD-gU51CSYFKt0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.254.0/24
Signature Algorithm: sha256WithRSAEncryption
46:3b:97:f5:0a:b4:c0:70:d6:75:93:54:e7:c1:ee:26:28:43:
c4:93:84:d6:b5:5a:f8:2a:63:e0:6d:13:a7:c5:75:03:ec:24:
7d:ff:c2:c1:b8:98:78:6a:20:52:3f:10:98:bc:af:cf:1d:66:
1f:ef:ea:84:2f:e9:a1:16:23:f0:d2:c7:15:8c:03:4f:b1:f3:
59:76:0b:05:f0:54:57:60:2c:80:9a:b0:e3:47:d8:c0:c6:19:
bc:63:b3:77:2d:b8:cc:b0:96:5b:a8:a8:de:da:6a:41:01:6c:
da:3c:49:65:10:e9:39:dc:12:1d:0a:19:26:74:74:ee:18:24:
db:4e:5f:1e:df:7a:1b:80:44:be:16:11:f1:ef:42:21:ea:d5:
d5:0c:9b:3e:97:fe:f3:8f:88:cf:61:12:94:ba:9a:b8:30:1e:
5b:c8:bb:c8:7e:52:68:9e:60:6c:35:28:27:b9:f4:e2:bc:8b:
c1:fd:1e:0d:68:50:1f:78:a4:4c:9e:0d:71:5a:65:16:85:3e:
98:d3:dc:b1:bf:1a:5c:c2:f6:1d:ae:2c:5b:d2:73:bd:73:74:
76:28:2e:2b:d5:d9:d9:97:00:ec:94:01:ce:82:75:10:4c:ba:
50:3f:74:fd:45:bb:14:16:0b:d8:4c:a4:1b:7b:38:a1:4e:c9:
3a:e0:19:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Dec 1 10:27:44 2023 by rpki-client on console-fra.rpki-client.org